My OOMA Telo 2 is configured behind my router and I have a Static Route set to the IP of the OOMA so I can
get to the OOMA from my internal LAN. I have remote administration enabled and I have the password protected area set.
It has been working like this fine for almost 3 years. Today I noticed I could get to the OOMA Telo's Setup page WITHOUT it asking for LOGIN. The setting is still set to ask for a login. I tried disabling and re-enabling both the password protected area and remote administration (Had to hook to Home port to do that)...But still I can access the OOMA Telo2 interface WITHOUT it asking for login information. My OOMA says the version is Version: 151500954. I confirmed I do NOT have any passwords saved in my browsers (I use Brave and Firefox)...Is there a problem with Version: 151500954?? When I access to OOMA Telo Setup Page it looks like it first tries to read a configuration file but then it just brings me to the OOMA Telo setup page without any login. I do not want to do a hard reset as our OOMA is our primary phone. Our cell phones cost 35 cents per minute and I definitely don't want to have to resort to those. Please advise. For now I am disabling remote administration since it's not prompting for a login. I will access it via HOME Port until I can find an answer.
OOMA Telo 2 Setup no longer asking for Login
Re: OOMA Telo 2 Setup no longer asking for Login
The setup link has an option to log in, but it doesn't have an option to log out; closing the browser tab, (or browser) may not be sufficient. If the browser retains the login state in its cookies or site data, then it could still access the setup page, without having to log in again.
Try clearing that data from the browser. (In Firefox, navigate to Settings -> Privacy & Security -> Cookies and Site Data -> Clear Data, check "Cookies and Site Data", then click "Clear". Optionally, check "Delete Cookies and site data when Firefox is closed). Then test whether the Ooma setup page prompts for a login, or not.
If that doesn't help, then contact Ooma for further assistance; there could be some new problem, introduced in Version: 151500954. Regardless, the router/modem firewall should still block access from the outside world to the setup link.
Try clearing that data from the browser. (In Firefox, navigate to Settings -> Privacy & Security -> Cookies and Site Data -> Clear Data, check "Cookies and Site Data", then click "Clear". Optionally, check "Delete Cookies and site data when Firefox is closed). Then test whether the Ooma setup page prompts for a login, or not.
If that doesn't help, then contact Ooma for further assistance; there could be some new problem, introduced in Version: 151500954. Regardless, the router/modem firewall should still block access from the outside world to the setup link.
Re: OOMA Telo 2 Setup no longer asking for Login
Thanks but I've already cleared browser cache and checked there were no passwords saved in the browser. I also tried two different browsers. I also tried changing the password to a simple password. Still the problem remains whether I am logging in remotely or via the Home Port. I believe that either the version is not reading the cofiguration file correctly (It may have been corrupted or has wrong file permissions) or the OOMA Telo version has a problem. Although I don't see anybody else complaining about it here. (But many probably don't even know about the Telo's setup page)...I am loathe to get involved with OOMA Support as I don't want to wind up Hard Resetting the OOMA and then have a non-functional OOMA and/or Website login issues. Their tech support is all overseas and many have little knowledge about any issues that may actually be occurring with the OOMA Equipment/System. They just spout scripted things to try. You can go down a real rabbit hole with them until you finally get bumped up to higher level people that might actually know something. Is there anybody from OOMA Stateside staff that actually checks these forum posts? I don't want to start resetting things willy nilly if there is indeed a problem with the OOMA Telo Version that is the problem and then I've just compounded the problem and possibly have a non-working device. Like I said our Cell Phones are very expensive per minute charges so I definitely don't want to have to use those.
Re: OOMA Telo 2 Setup no longer asking for Login
So after spending much time reiterating (Several times) to various levels of OOMA Support...
The last person I spoke with said that OOMA has disabled password authentication on the HOME Port IP 172.27.35.1...Which is OK since you need physical access to the HOME Port. HOWEVER as I have stated here and
to OOMA Support...Currently on the Version number I stated in my original post...The OOMA Telo 2 is NOT/NOT asking
for login information when connecting to the OOMA Telo 2 REMOTE ADMINISTRATION...THIS is a SECURITY Problem...
And I made it clear to the OOMA Support person exactly what the issue is and that it needs to be escalated. They advised
that OOMA Adanced Technical support would be responding...We'll see what they say...Until this is resolved my REMOTE ADMINISTRATION will remain DISABLED. If you currently have it enabled you can check to see if you can get to your OOMA Telo 2 without a password (Set one if you don't have it set)....Then clear the browser and close and open the browser and see if it asks for your LOGIN information...Most likely it will not. This is a security issue that needs to be addressed by OOMA ASAP.
The last person I spoke with said that OOMA has disabled password authentication on the HOME Port IP 172.27.35.1...Which is OK since you need physical access to the HOME Port. HOWEVER as I have stated here and
to OOMA Support...Currently on the Version number I stated in my original post...The OOMA Telo 2 is NOT/NOT asking
for login information when connecting to the OOMA Telo 2 REMOTE ADMINISTRATION...THIS is a SECURITY Problem...
And I made it clear to the OOMA Support person exactly what the issue is and that it needs to be escalated. They advised
that OOMA Adanced Technical support would be responding...We'll see what they say...Until this is resolved my REMOTE ADMINISTRATION will remain DISABLED. If you currently have it enabled you can check to see if you can get to your OOMA Telo 2 without a password (Set one if you don't have it set)....Then clear the browser and close and open the browser and see if it asks for your LOGIN information...Most likely it will not. This is a security issue that needs to be addressed by OOMA ASAP.
Re: OOMA Telo 2 Setup no longer asking for Login
With firmware version #140694055, the Telo 2 behaves as expected; the setup page prompts for a login/password, and clicking "Cancel" at that point results in an HTTP 401 'Unauthorized' return code. Providing the login/passsword grants access to the setup page, until after clearing the browser's site data.
Ooma usually pushes firmware updates automatically. If there is a problem with a newer version, then Ooma would need to push an older version instead. A factory reset wouldn't necessarily do that. Regardless, keep a list of any changed configuration settings, to make it easier to restore them after any reset.
Ooma usually pushes firmware updates automatically. If there is a problem with a newer version, then Ooma would need to push an older version instead. A factory reset wouldn't necessarily do that. Regardless, keep a list of any changed configuration settings, to make it easier to restore them after any reset.
Re: OOMA Telo 2 Setup no longer asking for Login
Just checked via my home port...Was still on 151500954...
Rebooted to see if maybe they rolled us back on firmware...Nope...Still on 151500954 and the login authentication is
still disabled on remote authentication...I disabled that again after checking. Oh and no word from anyone at OOMA.
I'll refrain from futher comments regarding OOMA.
Rebooted to see if maybe they rolled us back on firmware...Nope...Still on 151500954 and the login authentication is
still disabled on remote authentication...I disabled that again after checking. Oh and no word from anyone at OOMA.
I'll refrain from futher comments regarding OOMA.
Re: OOMA Telo 2 Setup no longer asking for Login
Did Ooma offer to roll back the firmware? An email request may be more effective than a phone call; ask them to push a firmware update for an earlier version, to test the Telo login/password issue. In the meantime, maybe someone else with the later version (#151500954) could test whether they have the same issue.
Even with a login/password though, the connection to the web site is not encrypted, so credentials are sent in the clear. The Telo primarily relies on restricted physical access to the LAN for security, either the LAN tied to the HOME port, or with remote administration enabled, the LAN tied to the INTERNET port.
So, the login/password is useful to protect against known, but not entirely trusted individuals within the household, (for example, children, or roommates), but if the Telo INTERNET LAN is in front of any router firewall, or otherwise accessible to strangers, then disable remote administration.
Even with a login/password though, the connection to the web site is not encrypted, so credentials are sent in the clear. The Telo primarily relies on restricted physical access to the LAN for security, either the LAN tied to the HOME port, or with remote administration enabled, the LAN tied to the INTERNET port.
So, the login/password is useful to protect against known, but not entirely trusted individuals within the household, (for example, children, or roommates), but if the Telo INTERNET LAN is in front of any router firewall, or otherwise accessible to strangers, then disable remote administration.